Lucene search
+L

3699 matches found

CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•29 views

OpenSolution Quick.Cart 安全漏洞

OpenSolution Quick.Cart is an online store system developed by the Polish company OpenSolution. Version 6.7 of OpenSolution Quick.Cart contains a security vulnerability, which stems from storing user passwords in plaintext. This vulnerability could allow privileged attackers to access user...

9.8CVSS5.8AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•34 views

OpenSolution Quick.Cart 授权问题漏洞

OpenSolution Quick.Cart is an online store system developed by the Polish company OpenSolution. Version 6.7 of OpenSolution Quick.Cart contains an authorization vulnerability. This vulnerability stems from the fact that session identifiers can be set before authentication and remain unchanged...

9.8CVSS5.9AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•16 views

PT-2026-6546

Name of the Vulnerable Software and Affected Versions Quick.Cart version 6.7 Quick.Cart affected versions not specified Description A user's session identifier can be set before authentication in Quick.Cart. The session ID remains consistent even after authentication, allowing an attacker to fixa...

9.8CVSS5.8AI score0.00311EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/02/04 5:16 p.m.•16 views

CVE-2026-23105

In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use clisactive to determine whether class is active in qfqrmfromag This is more of a preventive patch to make the code more consistent and to prevent possible exploits that employ child qlen manipulations on qfq...

7.8CVSS6.6AI score0.00141EPSS
SaveExploits0References34
Patchstack
Patchstack
•added 2026/02/03 9:13 p.m.•22 views

WordPress ACF Quick Edit Fields plugin <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference vulnerability

Authenticated Contributor+ Insecure Direct Object Reference vulnerability discovered by Chris Grello in WordPress Plugin ACF Quick Edit Fields versions = 3.2.2...

6.5CVSS5.8AI score0.00426EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/02/03 6:16 p.m.•24 views

CVE-2025-69875

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be...

7.8CVSS5.7AI score0.00472EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/03 6:16 p.m.•26 views

CVE-2025-69875

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be...

7.8CVSS0.00119EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/03 12:00 a.m.•36 views

CVE-2025-69875

A vulnerability exists in Quick Heal Total Security version 23.0.0 within the quarantine management component . The root cause is insufficient validation of restore paths combined with improper permission handling. This flaw allows a low-privileged local user to restore quarantined files into pro...

7.8CVSS5.8AI score0.00119EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/02/03 12:00 a.m.•10 views

CVE-2025-69875

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be...

5.5AI score0.00472EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/03 12:00 a.m.•30 views

EUVD-2025-206708

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be...

7.8CVSS5.5AI score0.00472EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•9 views

CVE-2025-69875: Improper Privilege Management

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be...

7.8CVSS5.8AI score0.00119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/31 12:30 a.m.•16 views

EUVD-2020-30931

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS6.6AI score0.00804EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/01/30 10:07 p.m.•8 views

CVE-2020-37050

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS6.6AI score0.00804EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/01/30 10:07 p.m.•22 views

CVE-2020-37050

Consolidated view: Quick Player 1.3 is affected by a buffer overflow in the .m3l file loading path, enabling potential remote code execution when a specially crafted file is loaded. Affected component/file: Quick Player 1.3 (buffer overflow in .m3l handling). Root cause: improper handling of craf...

9.8CVSS7.2AI score0.00804EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/30 10:07 p.m.•7 views

CVE-2020-37050 Quick Player 1.3 - '.m3l' Buffer Overflow

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS7.2AI score0.00804EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/30 10:07 p.m.•43 views

CVE-2020-37050 Quick Player 1.3 - '.m3l' Buffer Overflow

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS0.00804EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•33 views

Quick Player security vulnerability

Quick Player is a video playback application developed by Quick Player Inc. Version 1.3 of Quick Player contains a security vulnerability, which stems from a buffer overflow when loading specially crafted .m3l files, potentially allowing for the execution of arbitrary code...

9.8CVSS6.3AI score0.00804EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•28 views

PT-2026-5487

Name of the Vulnerable Software and Affected Versions Quick Player version 1.3 Description The software contains a buffer overflow issue that allows for the execution of arbitrary code. This is achieved by creating a malicious .m3l file with a specifically designed payload. Attackers can trigger...

9.8CVSS6.4AI score0.00804EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•2 views

CVE-2020-37050: Buffer Copy without Checking Size of Input

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS7.2AI score0.00804EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/29 2:16 p.m.•20 views

CVE-2025-7013

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS0.00374EPSS
SaveExploits0References2
Rows per page
Query Builder